From: Schulz, Dave (DSchulz@dpsciences.com)
Date: Thu Oct 27 2005 - 14:30:13 GMT-3
Thanks, Carlos. I check the archives. But are you saying that it is
better to indicate this as......
class-map foo
match protocol http mime "image/jpeg"
Dave Schulz, CCDP, CCNP, CCSP
Project Manager / TAC Supervisor
Data Processing Sciences Corporation
10810 Kenwood Road
Cincinnati, Ohio 45242
Phone - (513) 791-7100 ext.7411
Fax - (513) 791-4676
Email: dschulz@dpsciences.com
-----Original Message-----
From: Carlos G Mendioroz [mailto:tron@huapi.ba.ar]
Sent: Thursday, October 27, 2005 11:43 AM
To: Schulz, Dave
Cc: ccielab@groupstudy.com
Subject: Re: NBAR ..... mime type question
There have been many threads discussing NBAR and MIME types, there is
good content to take a look in the archives !
Don't confuse MIME type with file name.
Types are like "Content-Type: image/jpeg;", no dot there.
Also, get confortable with direction of transfers and where NBAR can see
some MIME encodings. Browsers advertize what they can receive, http
servers tell what format the content they send is.
-Carlos
Schulz, Dave @ 27/10/2005 12:20 dixit:
> I was looking through the doc cd under the NBAR examples for MIMI and
> ran across and example that states.....
>
> The following example classifies, within class map foo, packets based
on
> the JPEG MIME type:
> class-map foo
> match protocol http mime "*jpeg"
>
> However, if the question states to match a .jpeg file, then would it
be
> just as correct to configure that as:
>
> class-map foo
> match protocol http mime "*.jpeg" (with the "dot" added)
>
> Thoughts?
>
>
> Dave Schulz,
> Email: dschulz@dpsciences.com <mailto:dschulz@dpsciences.com >
>
>
This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:54 GMT-3